xref: /aosp_15_r20/system/logging/logd/README.auditd (revision 598139dc91b21518d67c408eaea2644226490971)
1*598139dcSAndroid Build Coastguard WorkerAuditd Daemon
2*598139dcSAndroid Build Coastguard Worker
3*598139dcSAndroid Build Coastguard WorkerThe audit daemon is a simplified version of its desktop
4*598139dcSAndroid Build Coastguard Workercounterpart designed to gather the audit logs from the
5*598139dcSAndroid Build Coastguard Workeraudit kernel subsystem. The audit subsystem of the kernel
6*598139dcSAndroid Build Coastguard Workerincludes Linux Security Modules (LSM) messages as well.
7*598139dcSAndroid Build Coastguard Worker
8*598139dcSAndroid Build Coastguard WorkerTo enable the audit subsystem, you must add this to your
9*598139dcSAndroid Build Coastguard Workerkernel config:
10*598139dcSAndroid Build Coastguard WorkerCONFIG_AUDIT=y
11*598139dcSAndroid Build Coastguard Worker
12*598139dcSAndroid Build Coastguard WorkerTo enable a LSM, you must consult that LSM's documentation, the
13*598139dcSAndroid Build Coastguard Workerexample below is for SELinux:
14*598139dcSAndroid Build Coastguard WorkerCONFIG_SECURITY_SELINUX=y
15*598139dcSAndroid Build Coastguard Worker
16*598139dcSAndroid Build Coastguard WorkerThis does not include possible dependencies that may need to be
17*598139dcSAndroid Build Coastguard Workersatisfied for that particular LSM.
18